Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECC4099AF4A111EF8DEF3C67762E951A.roa
File: ECC4099AF4A111EF8DEF3C67762E951A.roa (raw, json)
Hash identifier: xWXObJQgQQLDlf+14bS+3XEugkpexkow8aPmeSsD3C8=
Subject key identifier: FC:89:16:FB:3C:1C:A9:66:F9:86:0E:54:E0:B6:BD:43:B1:14:E8:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013873
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECC4099AF4A111EF8DEF3C67762E951A.roa
Signing time: Thu 27 Feb 2025 00:29:37 +0000
ROA not before: Thu 27 Feb 2025 00:00:33 +0000
ROA not after: Sat 19 Feb 2028 00:00:33 +0000
asID: 17561
IP address blocks: 156.249.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79987 (0x13873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:33 2025 GMT
Not After : Feb 19 00:00:33 2028 GMT
Subject: CN=67bfb1f1-c09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:71:52:59:7f:d4:8f:9c:80:2f:be:c9:ba:
60:7c:16:e7:bc:26:71:33:c7:6f:f5:c8:24:a6:45:
3f:4f:8e:82:a2:c1:eb:d4:7c:b6:0f:06:c4:e4:43:
c5:8f:9c:74:54:ce:85:08:a3:c9:8c:59:71:65:61:
ba:35:45:b7:80:12:14:eb:71:17:02:64:2f:84:10:
68:9f:92:00:13:f1:15:f1:e2:8d:df:26:94:1f:0b:
20:b0:38:3e:15:e5:93:b2:44:a6:d9:7a:1f:d5:24:
42:d7:86:18:96:3b:97:4c:0a:89:e3:93:6e:98:59:
b4:1a:2e:e3:73:a5:3f:a9:1b:ca:cf:8e:9a:41:05:
a5:aa:59:28:59:4b:30:d1:f5:00:af:2a:72:fe:56:
91:fb:ca:66:f5:41:66:92:f4:d1:7c:47:b5:96:5a:
2b:eb:4d:35:b9:85:52:33:0d:bc:3c:ce:67:b3:47:
60:09:0a:d7:b6:26:2d:49:17:eb:38:91:8b:f4:42:
ec:be:79:ed:2c:8e:f1:88:9e:f4:67:48:e2:fb:da:
09:91:3a:dc:9a:a5:71:a3:35:11:e5:5b:1d:ec:1c:
16:70:b2:dd:d0:33:47:b3:85:1d:dd:a5:8d:2f:de:
b8:0d:7c:6b:c9:4a:6f:09:47:32:31:4a:29:cc:90:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:16:FB:3C:1C:A9:66:F9:86:0E:54:E0:B6:BD:43:B1:14:E8:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECC4099AF4A111EF8DEF3C67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.233.0/24
Signature Algorithm: sha256WithRSAEncryption
65:55:ff:00:99:33:be:6d:e8:54:ad:d3:14:2c:9c:0d:b3:00:
76:fa:ec:b0:37:3e:b5:81:e1:e3:fa:ea:39:46:66:57:2b:04:
12:38:02:06:f7:1f:12:1a:1c:a1:7c:37:97:e3:29:ff:27:c0:
f4:a9:a9:74:bf:45:c4:43:18:a5:4c:82:65:7a:3f:6d:03:b7:
6e:c7:df:89:e4:20:04:01:71:ea:45:ba:7b:fb:12:de:1f:c2:
60:e8:56:b4:57:08:db:9c:f8:b9:e6:09:c2:f4:5b:7b:a8:40:
6b:c1:a4:f6:4b:43:2c:20:1e:62:b3:21:e7:56:66:bb:f3:c4:
ae:94:7a:6e:00:1b:d3:7c:e6:1e:b4:65:a9:7e:8a:af:98:d6:
d7:f5:57:4c:13:46:39:38:f2:22:53:22:16:6f:97:a8:bf:63:
ee:4f:e6:59:46:54:3a:a0:c2:a5:db:1a:b7:64:05:7f:17:49:
58:61:43:88:6e:b0:32:39:3b:eb:55:d0:45:2b:c6:b3:71:2f:
83:98:a3:04:7d:5c:e6:58:b8:a5:f9:d4:54:9e:92:78:0a:f9:
2d:85:ec:21:a4:24:fc:11:ee:bd:37:ba:59:21:95:75:5a:b3:
b9:a7:48:3b:bb:50:b6:3f:3f:91:43:34:ff:6c:48:ab:03:30:
7c:e9:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:45 2025 by rpki-client